File groups.yml of Package 000package-groups
# 'OUTPUT' is not a group, this defines the entry point for the solver.
# there is an entry for every group file that needs to be written out.
# the name of it needs to exist as package group as well and the solver
# will take the instructions in this group and the included ones
# (that's why sle_minimal is included to get minimal instructions)
# and solve the packages in it (one by one next to 'silents' and 'locks')
# and then at the end remove packages in the 'excludes'.
# excludes are not package groups but solved module groups
OUTPUT:
- sle_micro:
default-support: l3
recommends: false
includes:
- filesystems
- supplements
- kernel
- base
- sle_micro_extras:
default-support: unsupported
recommends: false
includes:
- base: support
excludes:
- sle_micro
sle_micro:
- SL-Micro-release
- systemd-presets-branding-ALP-transactional
# don't interfere with crony
- ntp: [locked]
- raspberrypi-firmware-extra: [aarch64] # bsc 1130015
- raspberrypi-firmware-extra-pi4: [aarch64] # bsc 1130015
- raspberrypi-firmware-config-camera: [aarch64] # bsc 1130015
- u-boot-rpiarm64: [aarch64] # bsc 1130015, jsc SLE-7276 / bsc 1164080
- u-boot-rpiarm64-doc: [aarch64] # jsc SLE-7276 / bsc 1164080
# needed for PowerPC
- opal-utils: [ppc64le] # bsc#1206842
- servicelog: [ppc64le] # bsc#1206842
- libservicelog: [ppc64le] # bsc#1206842
- ppc64-diag: [ppc64le] # bsc#1206842
- lsvpd: [ppc64le] # bsc#1206842
- ServiceReport: [ppc64le] # bsc#1206842
- secvarctl: [ppc64le] # bsc#1206842
- podman-docker # needed for docker compatibility
- podmansh # jsc#SMO-566
- docker-compose
- nerdctl
- salt-master
- salt-minion
- openssh-server-config-rootlogin
- cockpit-machines
- cockpit-podman
- xauth # needed for remote GUI
# needed for baremetal FDE
- libtss2-tcti-device0
- libtss2-tcti-spi-helper0
- libtss2-tcti-spidev0
# not available yet on ppc64le nor s390x
- fde-tools: [x86_64,aarch64]
- fde-firstboot: [x86_64,aarch64]
# needed for virtualization deployement tool
- python3-pvirsh
# needed for confidential computing
- libvirt-client-qemu
- sevctl: [x86_64]
# allow to debug selinux
- setroubleshoot-server
# needed for managing VM
- python311-lxml
- cracklib-dict-small
- systemd-experimental
- accountsservice
- systemd-portable
- patch
- skopeo
base:
- patterns-base-base
- patterns-base-transactional
- patterns-micro-defaults
- patterns-base-hardware
- patterns-container-runtime_podman
- patterns-container-runtime_docker
- patterns-base-salt_minion
- patterns-base-kvm_host
- patterns-base-selinux
- patterns-base-cockpit
- patterns-base-sssd-ldap # jsc#SMO-54
- elemental: [aarch64,x86_64] #jsc#SMO-303; this package requires everything else, pattern not needed (it caused some confusions)
- grub2 # Initial package for SLE 15
- grub2-branding-SLE: [x86_64,aarch64,ppc64le] # Initial package for SLE 15
- grub2-i386-pc: [x86_64] # TBD Initial package for SLE 15
- grub2-snapper-plugin # Initial package for SLE 15
# - grub2-systemd-sleep-plugin # Initial package for SLE 15
- grub2-x86_64-efi: [x86_64] # Initial package for SLE 15
- grub2-s390x-emu: [s390x] # dependency:grub2
- grub2-powerpc-ieee1275: [ppc64le] # dependency:grub2
- grub2-arm64-efi: [aarch64] # dependency:shim
- grub2-x86_64-xen: [x86_64] # Initial package for SLE 15
- shim: [x86_64,aarch64]
- firewalld
- suseconnect-ng
- systemd-default-settings-branding-SLE-Micro
- glibc-locale-base # (bsc#1176114)
- suse-build-key
- system-group-wheel # bsc#1214132
- system-user-mail # bsc#1214132; TODO: check whether to add these to a pattern instead
- system-user-bin # bsc#1214132
- system-user-uuidd # bsc#1214132
- lzop
staging:
- staging-build-key
kernel:
- kernel-default
- kernel-default-base: [x86_64,aarch64,ppc64le] # base kernel not exists on s390x
- kernel-default-livepatch: [x86_64, s390x]
- kernel-rt: [x86_64]
- kernel-rt-livepatch: [x86_64]
- kernel-source
- kernel-source-rt
- kernel-livepatch-tools
- lifecycle-data-sle-module-live-patching: [x86_64, s390x]
- kernel-livepatch-6_4_0-10-rt: [x86_64]
- kernel-livepatch-6_4_0-11-rt: [x86_64]
- kernel-livepatch-6_4_0-19-default: [x86_64, s390x]
- kernel-livepatch-6_4_0-20-default: [x86_64, s390x]
- kernel-livepatch-6_4_0-22-rt: [x86_64]
- kernel-livepatch-6_4_0-24-default: [x86_64, s390x]
- kernel-livepatch-6_4_0-25-default: [x86_64, s390x]
- kernel-livepatch-6_4_0-25-rt: [x86_64]
- kernel-livepatch-6_4_0-28-default: [x86_64, s390x]
- kernel-livepatch-6_4_0-28-rt: [x86_64]
- kernel-livepatch-6_4_0-30-rt: [x86_64]
- kernel-rt-livepatch: [x86_64]
# TODO: yast needs this. confirm where it comes from any why it's not in
# the base pattern.
- kexec-tools
# installed in uefi mode
- mokutil: [x86_64,aarch64]
filesystems:
- dosfstools
- e2fsprogs
- btrfsprogs
- squashfs
- xfsprogs
supplements:
- kernel-firmware-all
- bluez-firmware
- ipw-firmware
- open-vm-tools: [x86_64]
- hyper-v: [x86_64]
- ucode-amd: [x86_64]
- ucode-intel: [x86_64]
- bcache-tools
- cryptsetup
- glibc-locale
- iscsiuio
- lvm2
- multipath-tools
- nvme-cli
- open-iscsi
- nfs-client
- less
- wpa_supplicant
- dracut-kiwi-lib
- dracut-kiwi-oem-repart
- gptfdisk
- growpart
- growpart-generator
- growpart-rootgrow
- ignition
- combustion
- mdadm
- attr
- docker
- runc
# MERGED INTO DOCKER - docker-libnetwork
- release-notes-sl-micro
- policycoreutils-python-utils # bsc#1183165
- fdo-client # jsc#SLE-22946
- fdo-client-devel # jsc#SLE-22946
- selinux-policy-devel # requested by security team
- policycoreutils-devel # jsc#SMO-48, requested by security team
- sysstat
- numactl
- numad
- systemd-journal-remote #jsc#SMO-52
- ethtool # jsc#SMO-55
- patterns-base-fips # FIPS
- aide # STIG
- amazon-dracut-config
- google-dracut-config # jsc#PED-11572
- audit-audispd-plugins # STIG
- augeas # jsc#SMO-532
- augeas-lenses # jsc#SMO-532
- pam_pkcs11 # STIG
- mozilla-nss-tools # STIG
- pcsc-ccid # STIG
- pcsc-lite # STIG
- pcsc-tools # STIG
- opensc # STIG
- openscap
- openscap-utils
- scap-security-guide
- coolkey: [aarch64,x86_64,ppc64le] # STIG
- cifs-utils # jsc#SMO-43
- cpupower # jsc#SMO-43
- jq # jsc#SMO-43
- socat # jsc#SMO-43
- afterburn: [aarch64,x86_64] # jsc#SMO-69
- afterburn-dracut: [aarch64,x86_64] # jsc#SMO-69
# NOT FOUND - rpm-ndb # jsc#SMO-69
# removed due to bsc#268591
# - amazon-ssm-agent: [x86_64] # jsc#SMO-38
# - amazon-ecs-init: [x86_64] # jsc#SMO-38
- aws-cli: [x86_64] # bsc#1197611
# - yast2-schema-micro # jsc#SLE-18820
- amazon-dracut-config #jsc#PED-11572
- google-dracut-config # jsc#PED-11572
- azure-vm-utils: [aarch64,x86_64] # jsc#PED-11608
- ca-certificates-mozilla ##### SL Micro for Rancher begin
- bash-completion
- conntrack-tools
- hdparm
- helm
- helm-bash-completion
- lshw
- lsscsi
- pciutils
- qemu-guest-agent
- strace
- dracut-kiwi-oem-dump
- avahi
- libavahi-core7
- libdaemon0
- nss-mdns
# NOT FOUND - pciutils-ids
- syslinux: [x86_64]
- sysvinit-tools # left-over of python-azure-agent dependenies, kept to be safe
- zstd ##### SL Micro for Rancher end
- bzip2 #bsc#1226813
- qemu-hw-usb-redirect # jsc#SMO-78
- qemu-hw-display-virtio-vga # jsc#SMO-78
- qemu-hw-display-virtio-gpu # jsc#SMO-78
- qemu-hw-display-qxl # jsc#SMO-78
- tukitd # to be later required by the cockpit transactional-update module
- virt-install # bsc#1196887
- qemu-chardev-spice # jsc#SMO-78 (also needed for cockpit-machine / virt-install)
- python311-tornado # jsc#SMO-82
- python311-simplejson # jsc#SMO-82
- python311-pycurl # jsc#SMO-82
- python311-python-dateutil # suma
- raspberrypi-firmware: [aarch64] # jsc#SMO-105
- raspberrypi-firmware-config: [aarch64] # jsc#SMO-105
- raspberrypi-firmware-dt: [aarch64] # jsc#SMO-105
- u-boot-rpiarm64: [aarch64] # jsc#SMO-105
- bcm43xx-firmware: [aarch64] # jsc#SMO-105
- wireless-tools # bsc#1199084
- jeos-firstboot # jsc#SMO-88
- NetworkManager # jsc#SMO-84
- ModemManager # jsc#SMO-84
- NetworkManager-cloud-setup # jsc#SMO-200, bsc#1204549
- NetworkManager-tui # jsc#SMO-200
- NetworkManager-wwan # jsc#SMO-200, bsc#1205529
- NetworkManager-bluetooth # jsc#SMO-200
- NetworkManager-pppoe # jsc#SMO-200
- cockpit-networkmanager # listed explicitly due to pattern's depependency being conditional
- cni-plugin-dnsname # jsc#SMO-63
- restorecond # jsc#SMO-127
- cloud-init # jsc#SMO-305
- microsoft-dracut-config: [x86_64,aarch64]
- google-guest-agent
- google-guest-configs #jsc#SMO-345
- google-guest-oslogin
- google-osconfig-agent
- regionServiceClientConfigEC2: [x86_64,aarch64] # jsc#SMO-110
- regionServiceClientConfigGCE: [x86_64,aarch64] # jsc#SMO-110
- regionServiceClientConfigAzure: [x86_64,aarch64] # jsc#SMO-110
- cloud-regionsrv-client: [x86_64,aarch64] # jsc#SMO-110
- python311-toml #jsc#SMO-110
- cloud-netconfig-gce: [x86_64,aarch64] # jsc#SMO-110
- cloud-netconfig-ec2: [x86_64,aarch64] # jsc#SMO-110
- cloud-netconfig-azure: [x86_64,aarch64] # jsc#SMO-110
- cloud-regionsrv-client-addon-azure: [x86_64,aarch64] # jsc#SMO-110
- cloud-regionsrv-client-plugin-azure: [x86_64,aarch64] # jsc#SMO-110
- cloud-regionsrv-client-plugin-ec2: [x86_64,aarch64] # jsc#SMO-110
- cloud-regionsrv-client-plugin-gce: [x86_64,aarch64] # jsc#SMO-110
- kubevirt-virtctl: [x86_64] # jsc#SMO-140
- kubevirt-manifests: [x86_64] # jsc#SMO-140
- containerized-data-importer-manifests: [x86_64] # jsc#SMO-140
- python-azure-agent # jsc#SMO-345
- python-azure-agent-config-micro # jsc#SMO-345
- haproxy # jsc#SMO-124
- keepalived # jsc#SMO-124
- drbd # jsc#SMO-124
- drbd-utils # jsc#SMO-124
- drbd-kmp-default # jsc#SMO-124
- canutils # jsc#SMO-149
- supportutils-plugin-suse-public-cloud # Added based on check between Micro 5.5 and ALP, jsc#SMO-216
- git # Added based on check between Micro 5.5 and ALP, jsc#SMO-247
- fwupd # jsc#SMO-213
- fwupd-efi: [aarch64,x86_64] # jsc#SMO-213
- liblttng-ctl0: [aarch64,ppc64le,x86_64] # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
- liblttng-ust1: [aarch64,ppc64le,x86_64] # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
- liblttng-ust-ctl5: [aarch64,ppc64le,x86_64] # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
- liblttng-ust-python-agent1: [aarch64,ppc64le,x86_64] # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
- lttng-modules: [x86_64] # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
- lttng-tools: [x86_64] # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
- nvidia-open-driver-G06-signed-kmp-default: [x86_64,aarch64] # Added based on check between Micro 5.5 and ALP, jsc#SMO-274
- nvidia-open-driver-G06-signed-cuda-kmp-default: [x86_64,aarch64] # jsc#SMO-456
- kernel-firmware-nvidia-gspx-G06: [x86_64,aarch64] # Added based on check between Micro 5.5 and ALP, jsc#SMO-274
- wireless-regdb # Added based on check between Micro 5.5 and ALP, bsc#1215153
- netcat-openbsd # bsc#1202554
- linuxptp # jsc#SMO-176
- rust-keylime # jsc#SMO-179
- traceroute # from Micro for Rancher
- tuned # jsc#SMO-189
- rt-tests # jsc#SMO-206
- tpm-tools # requests by partners
- tpm2-openssl
- libpulp-load-default: [x86_64]
- libpulp-tools: [x86_64]
- libpulp0: [x86_64]
- trousers
- mcelog: [x86_64]
- usbutils
- usbguard
- usbguard-tools
- ipmitool
- acpica: [x86_64,aarch64]
#* tboot: [x86_64] - not yet in the code base
- ledmon # jsc#PED-3975
- accel-config: [x86_64] # jsc#PED-4562
- dpdk: [aarch64,x86_64,ppc64le] # jsc#PED-7145
- dpdk-tools: [aarch64,x86_64,ppc64le] # jsc#PED-7145
- openvswitch # jsc#PED-7145
# end of requests by partners
- libatomic1 # needed by SAP
- man # bsc#1218539
- podman-remote # bsc#1224050
- libOpenCL1
- python-instance-billing-flavor-check: [x86_64,aarch64]
- net-snmp # reason: jsc#SMO-541
- realmd # reason: jsc#PED-12638
- realmd-lang
- krb5-client # reason: jsc#PED-12638
- sssd-tools # reason: jsc#PED-12638
- sssd-dbus # reason: jsc#PED-12638
- python3-sssd-config # reason: jsc#PED-12638
sle_micro_extras:
- tboot # jsc#PED-4562
- mcelog # jsc#PED-4562
- gcc # jsc#PED-4562
- make # jsc#PED-4562
- automake # jsc#PED-4562
- autoconf # jsc#PED-4562
- systemd-devel # jsc#PED-4562
- stress-ng # jsc#PED-4562
- bonnie # jsc#PED-7056
- fwts # jsc#PED-7056
- iperf # jsc#PED-7056
- nmap # jsc#PED-7056
- crash # bsc#1208935
- kubevirt-tests # bsc#1219636
- libjson-c-devel # bsc#1214638
- SL-Micro-Extras-release # bsc#1224074
- aaa_base-malloccheck # jsc#PED-8802
- brp-check-suse # jsc#PED-8802
- build-mkbaselibs # jsc#PED-8802
- bzip2 # jsc#PED-8802
- compat-usrmerge-build # jsc#PED-8802
- cpp-build # jsc#PED-8802
- debugedit # jsc#PED-8802
- dwarves # jsc#PED-8802
- dwz # jsc#PED-8802
- fdupes # jsc#PED-8802
- fipscheck # jsc#PED-8802
- gcc13-c++ # jsc#PED-8802
- gcc13-PIE # jsc#PED-8802
- gcc-build # jsc#PED-8802
- gcc-build-c++ # jsc#PED-8802
- gcc-build-PIE # jsc#PED-8802
- gdb # jsc#PED-8802
- gettext-runtime-mini # jsc#PED-8802
- gettext-tools-mini # jsc#PED-8802
- kernel-64kb-devel: [aarch64] # jsc#PED-8802
- kernel-default-devel # jsc#PED-8802
- kernel-devel # jsc#PED-8802
- kernel-macros # jsc#PED-8802
- kernel-obs-build # jsc#PED-8802
- kernel-source # jsc#PED-8802
- kernel-rt-devel: [x86_64]
- kernel-syms # jsc#PED-8802
- krb5-mini # jsc#PED-8802
- libdebuginfod1 # jsc#PED-8802
- libdwarves1 # jsc#PED-8802
- libelf-devel # jsc#PED-8802
- libfipscheck1 # jsc#PED-8802
- libsource-highlight4 # jsc#PED-8802
- libstdc++6-devel-gcc13 # jsc#PED-8802
- libzstd-devel # jsc#PED-8802
- lua54 # jsc#PED-8802
- pesign # jsc#PED-8802
- polkit-default-privs # jsc#PED-8802
- python-rpm-macros # jsc#PED-8802
- python-rpm-packaging # jsc#PED-8802
- rpm-build # jsc#PED-8802
- rpm-build-perl # jsc#PED-8802
- vim # jsc#PED-8802
- xxd # jsc#PED-8802
- python3-kiwi # jsc#PED-8745
- kiwi-systemdeps-disk-images # jsc#PED-8745
# packages in here are blocked from required on medium by means of
# telling the solver to forbid using them. A lighter form is to
# add packages to unneeded.yml - this just protocols the decision
# not to put them in any module *at this point*.
UNWANTED:
- systemd-presets-branding-SLE
- systemd-default-settings-branding-SLE
- dummy-release
- unified-installer-release
- kubic-locale-archive (bsc#1176114)
- busybox-findutils #bsc#1202331
- busybox-grep
- busybox-gzip
- busybox-sed
- busybox-util-linux
- busybox-xz
- os-update # not compatible with transactional-update
- sysconfig-netconfig # SLE15 stuff
# stuff below inherited from SLE15-SP2
- chrony-pool-openSUSE # bsc#1156884 / jsc#SLE-11424
- sendmail # fate#313023
- ntfsprogs-extra # not safe
- libfbclient-devel # jsc#SLE-11695
- libfbclient2 # jsc#SLE-11695
- reiserfs # FATE#323394
# glusterfs packages, not wanted by PM
- libglusterfs0
# upstream
- gdm-branding-upstream
- gfxboot-branding-upstream
- gio-branding-upstream
- gnome-menus-branding-upstream
- grub2-branding-upstream
- gtk2-branding-upstream
- gtk3-branding-upstream
- NetworkManager-branding-upstream
- PackageKit-branding-upstream
- MozillaFirefox-branding-upstream
- icewm-config-upstream # bsc#1063272
# unwanted JREs
- java-1_7_0-bootstrap-headless
- java-9-openjdk-headless
- slecompliance # bsc#1158969
- golang-github-prometheus-prometheus # rejected jsc#ECO-1659
# dnf
- PackageKit-backend-dnf # jsc#SLE-11804
- hawkey-man # jsc#SLE-11804
- libdnf-devel # jsc#SLE-11804
- libdnf2 # jsc#SLE-11804
- libmodulemd-devel # jsc#SLE-11804
- libmodulemd2 # jsc#SLE-11804
- librepo-devel # jsc#SLE-11804
- librepo0 # jsc#SLE-11804
- libzck-devel # jsc#SLE-11804
- modulemd-validator # jsc#SLE-11804
- python3-hawkey # jsc#SLE-11804
- python3-libdnf # jsc#SLE-11804
- python3-libmodulemd # jsc#SLE-11804
- python3-librepo # jsc#SLE-11804
- typelib-1_0-Modulemd-2_0 # jsc#SLE-11804
- zchunk # jsc#SLE-11804
# k3s-related packages (bsc#1230742, jsc#EDGE-565)
- k3s-install
- k3s-selinux
